FRM Part II · FRM Exam Part II · Risk Measurement and Assessment
A bank suffers a loss when a payment is sent to the wrong beneficiary because an operations clerk mistyped an account number. The error was unintentional and the process had no independent verification step. Which statement best describes the identification and classification of this event?
The event belongs in Execution, Delivery and Process Management, with the lack of independent verification noted as the control weakness. The error was unintentional, so fraud categories do not apply, and damage to physical assets concerns tangible property rather than a mistyped payment instruction.
- AExternal Fraud, because a third party received the funds
- BInternal Fraud, because an employee initiated the payment
- CExecution, Delivery and Process Management, with the missing verification control noted as the control weaknessCorrect
- DDamage to Physical Assets, because the loss reduced the bank's assets
Explanation
An unintentional data entry error in transaction processing falls under Execution, Delivery and Process Management. Recording the absent four-eyes check as the control gap supports identification of the root cause. Fraud categories require intent, which is absent, and physical asset damage refers to tangible assets.
Did you get it right without looking?
One question tells you little. A timed set on Risk Measurement and Assessment shows your real accuracy, how long you take and where you lose marks.
More Risk Measurement and Assessment questions
- An operational risk analyst notices that a bank's internal loss database records events by the date they were discovered, not the date they …
- A bank sets a KRI for staff turnover in its settlements team with an amber threshold of 10% and a red threshold of 15% annualised. Last quar…
- Under a loss distribution approach (LDA), a bank models a single risk cell with annual frequency Poisson with mean 20 and a severity distrib…
- A bank's operational risk team is building a loss event taxonomy. A trader enters unauthorized positions beyond his limits and hides the los…
- A bank fits a lognormal severity distribution to internal losses collected only above a reporting threshold of USD 50,000, but treats the da…
- In scenario analysis for operational risk, a workshop estimates a severe cyber-extortion event. Experts give a frequency of once in 20 years…